The vulnerability of the CIP Message Handler component in Rockwell Automation’s programmable logic controllers ControlLogix 5580, CompactLogix 5380, Compact GuardLogix 5380 SIL 2, Compact GuardLogix 5380 SIL 3, CompactLogix 5480, FactoryTalk Logix Echo allows a intruder to trigger a service failure.

🗓️ 30 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

CIP Message Handler vulnerability in Rockwell PLCs allows an attacker to trigger service failure via input data processing errors.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-6207	10 Oct 202412:00	–	circl
CNNVD	Rockwell Automation多款产品安全漏洞	14 Oct 202400:00	–	cnnvd
CVE	CVE-2024-6207	14 Oct 202420:53	–	cve
Cvelist	CVE-2024-6207	14 Oct 202420:53	–	cvelist
EUVD	EUVD-2024-47344	3 Oct 202520:07	–	euvd
ICS	Rockwell Automation ControlLogix	10 Oct 202406:00	–	ics
NVD	CVE-2024-6207	14 Oct 202421:15	–	nvd
OSV	CVE-2024-6207	14 Oct 202421:15	–	osv
Positive Technologies	PT-2024-7383 · Rockwell Automation · Factorytalk Logix Echo +5	10 Oct 202400:00	–	ptsecurity
Tenable Nessus	Rockwell Automation ControlLogix Improper Input Validation (CVE-2024-6207)	21 Oct 202400:00	–	nessus

Vulners

Node

rockwell_automation controllogix_5580Range35.011–35.013

OR

rockwell_automation guardlogix_5580Range35.011–35.013

OR

rockwell_automation compactlogix_5380Range35.011–35.013

OR

rockwell_automation compactlogix_5480Range35.011–35.013

OR

rockwell_automation controllogix_5580Range28.011–33.017

OR

rockwell_automation controllogix_5580Range34.011–34.014

OR

rockwell_automation controllogix_5580Range36.011–36.011

OR

rockwell_automation controllogix_5580_processRange33.011–33.017

OR

rockwell_automation controllogix_5580_processRange34.011–34.014

OR

rockwell_automation controllogix_5580_processRange35.011–35.013

OR

rockwell_automation controllogix_5580_processRange36.011–36.011

OR

rockwell_automation guardlogix_5580Range31.011–33.017

OR

rockwell_automation guardlogix_5580Range34.011–34.014

OR

rockwell_automation guardlogix_5580Range36.011–36.011

OR

rockwell_automation compactlogix_5380Range28.011–33.017

OR

rockwell_automation compactlogix_5380Range34.011–34.014

OR

rockwell_automation compactlogix_5380Range36.011–36.011

OR

rockwell_automation compact_guardlogix_5380_sil_2Range31.011–33.017

OR

rockwell_automation compact_guardlogix_5380_sil_2Range34.011–34.014

OR

rockwell_automation compact_guardlogix_5380_sil_2Range35.011–35.013

OR

rockwell_automation compact_guardlogix_5380_sil_2Range36.011–36.011

OR

rockwell_automation compact_guardlogix_5380_sil_3Range32.013–33.017

OR

rockwell_automation compact_guardlogix_5380_sil_3Range34.011–34.014

OR

rockwell_automation compact_guardlogix_5380_sil_3Range35.011–35.013

OR

rockwell_automation compact_guardlogix_5380_sil_3Range36.011–36.011

OR

rockwell_automation compactlogix_5480Range32.011–33.017

OR

rockwell_automation compactlogix_5480Range34.011–34.014

OR

rockwell_automation compactlogix_5480Range36.011–36.011

OR

rockwell_automation factorytalk_logix_echoRange33.011–33.017

OR

rockwell_automation factorytalk_logix_echoRange34.011–34.014

OR

rockwell_automation factorytalk_logix_echoRange35.011–35.013

OR

rockwell_automation factorytalk_logix_echoRange36.011–36.011

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-6207
vuldb	www.vuldb.com/
vulners	www.vulners.com/cve/CVE-2024-6207
rockwellautomation	www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1707.html
web	www.web.nvd.nist.gov/view/vuln/detail

30 Oct 2024 00:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS 37.5

CVSS 27.8

EPSS0.00581

cip message handler rockwell automation programmable logic controllers control logix compact logix factorytalk logix echo input data processing service failure